Dashboards & Visualizations

All the single value panels in the table showing values not found but one panel shows zero in numerical with bar

marisstella
Explorer

Hi Everyone,

All the single value panels in the table showing as "values not found" but one panel shows "zero" in numerical with bar like if there is any value found it will show that number ex:123 .
I want to make sure, this particular panel also show as "values not found" to make all the panels are behaving similar.

0 Karma

woodcock
Esteemed Legend

Show us your XML.

0 Karma

niketn
Legend

@marisstella if you have count() aggregate function or fillnull in the single value query then 0s will be filled in the viz. You should change it to sum() aggregation or make sure no value is represented as NULL value in the tabular output instead of 0.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

maciep
Champion

that probably means the search for that panel actually produces a 0 as opposed to not finding any events. not a ton of info to go on here...but i would run that panel's search to see what it's doing.

There are also ways with splunk search to make "no results found" show something else, but i'm assuming you would know if something like that was set up in your dashboard.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...